rpms/freeradius
7
0
Fork 0
Code Issues Pull Requests Releases Activity
e57796e0e2
freeradius/freeradius-cert-config.patch

53 lines
2.1 KiB
Diff
Raw Normal View History

- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
diff -r -u freeradius-server-2.2.0.orig/raddb/certs/ca.cnf freeradius-server-2.2.0.work/raddb/certs/ca.cnf
--- freeradius-server-2.2.0.orig/raddb/certs/ca.cnf 2012-09-10 07:51:34.000000000 -0400
+++ freeradius-server-2.2.0.work/raddb/certs/ca.cnf 2012-09-25 15:29:08.792013636 -0400
@@ -14,7 +14,7 @@
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
RANDFILE = $dir/.rand
name_opt = ca_default
cert_opt = ca_default
-default_days = 365
+default_days = 60
default_crl_days = 30
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
default_md = sha1
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
preserve = no
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
diff -r -u freeradius-server-2.2.0.orig/raddb/certs/client.cnf freeradius-server-2.2.0.work/raddb/certs/client.cnf
--- freeradius-server-2.2.0.orig/raddb/certs/client.cnf 2012-09-10 07:51:34.000000000 -0400
+++ freeradius-server-2.2.0.work/raddb/certs/client.cnf 2012-09-25 15:29:19.046932303 -0400
@@ -14,7 +14,7 @@
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
RANDFILE = $dir/.rand
name_opt = ca_default
cert_opt = ca_default
-default_days = 365
+default_days = 60
default_crl_days = 30
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
default_md = sha1
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
preserve = no
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
diff -r -u freeradius-server-2.2.0.orig/raddb/certs/server.cnf freeradius-server-2.2.0.work/raddb/certs/server.cnf
--- freeradius-server-2.2.0.orig/raddb/certs/server.cnf 2012-09-10 07:51:34.000000000 -0400
+++ freeradius-server-2.2.0.work/raddb/certs/server.cnf 2012-09-25 15:29:26.118877959 -0400
@@ -14,7 +14,7 @@
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
RANDFILE = $dir/.rand
name_opt = ca_default
cert_opt = ca_default
-default_days = 365
+default_days = 60
default_crl_days = 30
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
default_md = sha1
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
preserve = no
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid files when loading config files - Upgrade to new 2.2.0 upstream release
2012-10-03 19:19:41 +00:00
diff -r -u freeradius-server-2.2.0.orig/raddb/eap.conf freeradius-server-2.2.0.work/raddb/eap.conf
--- freeradius-server-2.2.0.orig/raddb/eap.conf 2012-09-10 07:51:34.000000000 -0400
+++ freeradius-server-2.2.0.work/raddb/eap.conf 2012-09-25 15:31:17.623971648 -0400
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
@@ -281,7 +281,11 @@
# for the server to print out an error message,
# and refuse to start.
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
#
- make_cert_command = "${certdir}/bootstrap"
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
+ # Redhat RPM's run the bootstrap certificate creation
+ # as part of the RPM install (not upgrade), therefore
+ # the make_cert_command is commented out.
+ #
+ #make_cert_command = "${certdir}/bootstrap"
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
#
Upgrade to latest upstream release, 2.1.12
2011-10-03 19:04:20 +00:00
# Elliptical cryptography configuration
Reference in New Issue Copy Permalink